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Claims 


What Is Claimed Is: 


1 . A method for providing non-repudiation of transaction information that includes 
mark up language data, comprising: / 

(a) receiving a confirmation request form from a server for digital 
signing by a digital signing process; / 

(b) temporarily maintaining the confirmation request form in 
1 0 volatile memory associated with a client unit; 

(c) presenting a copy of the temporarily maintained confirmation 
request form for display to a user; anfl 

(d) digitally signing the temporarily maintained confirmation 
request form in response to confirmation data received in response to 

1 5 displaying the copy of the temporarily maintained original transaction 

data. 


2. The method of claim 1 wherein the confirmation request form includes at least 
one mark up language form that includes user entered data, at least one field name 

20 and form formatting information, all of which are presented for display to the user 

for acceptance and for receiving a aigital signature. 

3. The method of claim 1 including the step of: 

(e) sending the signed donfirmation request form to a server for signature 
25 verification wherein the server compares a stored copy of the 

confirmation requlest form as it existed prior to receiving the digital 
signature, with tme received digitally signed confirmation request form. 
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The method of claim 1 wherein the received confirmatiotfrequest form is sent by 
a server that also provides incomplete mark up langjj^ge form data from which the 
received confirmation request form was based. X 

The method of claim 1 wherein th^tep of receiving the confirmation request 
form includes receiving a transaction confirmation request from a server. 

The method of claim 1/wherein steps (a) and (b) are performed under control of a 
non-proxy cryptographic software application. 

The methocLof claim 6 wherein step (c) is performed under control of a web 
browser. / 
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8. A method for providing non-repudiation of transaction information that includes 
mark up language data, comprising: / 

(a) receiving, by a web browser associated with a client unit, an 
incomplete mark up language form, including aft least one field name and 

5 form formatting information, for use in completing an electronic 

transaction with a receiving unit; / 

(b) presenting, by the web browsen the incomplete mark up 
language form for completion and submission to the receiving unit; 

(c) launching, in response to a completed form submission request, 
10 a non-proxy cryptographic application^ and sending through the non-proxy 

cryptographic application, at least user entered data and an associated field 
name for the receiving unit; / 

(d) receiving back from ther receiving unit, a transaction 
confirmation request including a Confirmation request form that includes 

1 5 the at least user entered data, the associated field name and the form 

formatting information, for digital signing by the non-proxy cryptographic 
application; / 

(e) temporarily maintaining, under control of the non-proxy 
cryptographic application, tne confirmation request form in volatile 

20 memory associated with tMe client unit; 

(f) presenting a copy of the temporarily maintained confirmation 
request form, by the web browser, for display to a user; and 

(g) digitally signing, by the non-proxy cryptographic application, 
the temporarily maintained confirmation request form in response 


25 to confirmation data entered by the user in response to displaying 

the copy of the temporarily maintained original transaction data. 

9. The method of claim 8/including the step of: 

(h) / sending the signed confirmation request form to the 

30 receivin^unit for signature verification wherein the receiving unit 
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compares a stored copy of the confirmation request form as it existed 
prior to receiving the digital signature, with received digitally signed 
confirmation request form. / 

The method of claim 9 wherein the non-proxy cryptographic application is an 
applet. / 

The method of claim 9 including the step of digitally signing, by the receiving 
unit, the received digitally signed confirmation request form if the comparison 
indicates that it matches the storedncopy of the confirmation request form. 
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at least one proces 
volatile memory, 


• 


An apparatus for providing non-repudiation of transaction information that 
includes mark up language data, c omprising: 

>ing unit; 

>peratively coupled to the processing unit, 
non-volatile memjbry, operatively coupled to the processing unit, 
containing a web browser and a non-proxy cryptographic application 


wherein the non-proxy 
request form from a sen 


tographic application receives confirmation 
er for digital signing by the non-proxy 
cryptographic application, temporarily maintains the confirmation request 
form in the volatile memory, and wherein the web browser presents a copy 
of the temporarily maintained confirmation request form for display to a 
user [to prevent tampering]; and wherein the non-proxy cryptographic 
application digitally signs the temporarily maintained confirmation 
request form in response to confirmation data received in response to 
displaying the copy ojf the temporarily maintained original transaction 
data. 


The apparatus of claim 12 wherein the confirmation request form includes at least 
one mark up language form that includes user entered data, at least one field name 
and form formatting information, all of which are presented for display to the 
user, by the web browser for acceptance and to the non-proxy cryptographic 
application to receive a digital signature. 

The apparatus of claim Y2 wherein the non-proxy cryptographic application sends 
the signed confirmation request form to the server for signature verification. 

The apparatus of claim 12 wherein the received confirmation request form is sent 
by a server that also provides the non-proxy cryptographic application with initial 
unpopulated transaction mark up language form data from which the received 
confirmation request form was based. 
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16. The apparatus of claim 12 wherein me non-proxy cryptographic application 
receives a transaction confirmation request from a server. 
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1 7. A storage medium comprising: \ 

memory containing executable instructions that when read by one or more 
processing units, causes the one or more processing units to: 

recei\re confirmation request form from a server for digital signing 
by a digital signing process; 

temporarily maintain the confirmation request form in volatile 
memory associated with a client unit; 

present a copy of the temporarily maintained confirmation request 
form for display to a user; and 

digitally sign the temporarily maintained confirmation request 
form in response tip confirmation data received in response to displaying 
the copy of the temporarily maintained original transaction data. 


18. The storage medium of claim 17 wherein the confirmation request form includes at 
1 5 least one mark up language form that includes user entered data, at least one field 

name and form formatting infonmation, all of which are presented for display to the 
user for acceptance and for receiving a digital signature. 
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19. The storage medium of claim Y 


more processing units to send th 
signature verification. 


wherein the memory includes executable 


instructions that when executed by the one or more processing units causes the one or 


signed confirmation request form to a server for 


20. The storage medium of claim 17 wherein the step of receiving confirmation request 
25 form includes receiving a transaction confirmation request from a server. 
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